Changing the IP address of the TRITON management server

Topic 50611 | Management Server Location Change | Web, Data, and Email Security Solutions | Version 7.8.x


	Warning If Web Security policy (Policy Broker, Policy Server, Policy Database) or hybrid (Directory Agent, Sync Service) components reside on the TRITON management server, the process of changing the IP address is complicated. Please contact Technical Support for assistance.

Before changing the IP address of the TRITON management server, if Web Security Log Server is installed on the management server machine, remove it. The steps below include instructions for reinstalling it after the IP address change is complete.

Complete the following steps after changing the IP address of the TRITON management server.

Update TRITON Infrastructure with the new IP address.

See Configuring TRITON Infrastructure to use a new IP address or hostname for instructions.

If SQL Server 2008 R2 Express (SQL Server Express) is installed on this machine, it will be automatically configured to the new IP address along with TRITON Infrastructure.

(Web Security only): Update the configuration of the Web Security module to reflect the new IP address:

Recreate Apache SSL certificates for the Web Security manager. See Creating Apache SSL Certificates. When following these instructions, be sure to edit the openssl.txt file to reflect the new IP address of the TRITON management server.

Edit the Web Security catalina.properties file to reflect the new IP address. See Configuring Tomcat to a use new local IP address.

Navigate to the Web Security bin directory (C:\Program Files (x86)\Websense\Web Security\bin\, by default) and open the websense.ini file in a text editor.

Update the value of the LocalServerIP parameter to the new IP address.

If you want to run Web Security Log Server on the management server (not recommended), and removed it as instructed before changing the IP address of the server, open a Windows command prompt and run the following commands from the C:\Program Files (x86)\Websense\Web Security\bin\ directory:

LogServer.exe -i

LogServer.exe -r

Log onto the Web Security manager and navigate to Settings > Reporting > Log Server page.

Verify that correct information appears in the SQL Server location field.

If you change the SQL Server location value, use the Windows Services tool to restart Websense Log Server.

Use the Windows Services tool to restart the Websense RTM Server and Websense RTM Client services.

After changing the Log Server IP address, if alerts appear from old IP address, restart Policy Server to clear the old alert data.

(Email Security only): Edit the Email Security catalina.properties file to reflect the new IP address. See Configuring Tomcat to a use new local IP address.

(Email Security only): If Email Security Log Server is installed on the TRITON management server machine, update TRITON Unified Security Center with its new IP address. See Configuring a new hostname for the Web Security management components.


	Note This is required only for those appliances using the Email Security Log Server located on the TRITON management server machine. If an appliance is using an Email Security Log Server located elsewhere, do not update its IP address on that appliance.

If you have multiple Email Security Gateway appliances in your deployment, update them as well with the new IP address of Email Security Log Server. To update other appliances, complete the steps again in Configuring a new hostname for the Web Security management components with the following modifications:

After logging into the TRITON Unified Security Center, click Appliances in the TRITON Unified Security Center banner.

Click Manage Appliances and select the appliance you want to update.

Continue with the rest of the procedure as normal.

Repeat this process for each Email Security Gateway appliance that uses the Email Security Log Server located on the TRITON management server machine.

(Email Security only): If the Email Security Log Database is located on the TRITON management server machine (e.g., SQL Server 2008 R2 Express is installed on the machine and maintains the log database), update the database location in TRITON Unified Security Center. See Updating the Log Database location for Email Security Gateway.

(Data Security only): Modify the Data Security Management Server installation to reflect the change. See Changing the IP address of the Data Security Management Server.

If your subscription includes Websense Web Security Gateway Anywhere, Email Security Gateway, or Email Security Gateway Anywhere, re-register them with Data Security Management Server (located on the TRITON management server machine). This is required for Web and email DLP (data loss prevention) features.

For Web Security Gateway Anywhere, see Re-register Websense Content Gateway.

For Email Security Gateway, see Re-registering Email Security Gateway with Data Security.